MachPanel Knowledgebase

Files/Extension required by MachPanel for WAF policy

rehan_waseem — Thu, 08 Oct 2026 05:34:26 GMT

Summary

This article will provide you the list of files/extension which are required by MachPanel

Applies To

All Versions

Details

Following are the list of files/extension required by MachPanel so that you can update your WAF Policy.

'.aspx'
'.asmx'
'.axd'
'.ashx'
'.js'
'.css'
'.html'
'.htm'
'.json'
'.xml'
'.txt'
'.csv'
'.xlsx'
'.xls'
'.jpg'
'.jpeg'
'.png'
'.gif'
'.svg'
'.webp'
'.ico'
'.woff'
'.woff2'
'.ttf'
'.eot'
'.otf'
'.pdf'
'.zip'
'.doc'
'.docx'
'.ppt'
'.pptx'
'.rtf'
'.mp3'
'.wav'
'.mp4'
'.mov'
'.avi'
'.mkv'

Tenant Consolidation - Merging Two MachPanel Organizations/Domains Into One

rehan_waseem — Tue, 06 Oct 2026 13:42:52 GMT

Summary

This article outlines the procedure merge / consolidate two separate customer organizations and their respective mail domains into a single target tenant structure within MachPanel. This approach applies when an enterprise absorbs or merges with another, combining their directory assets, mailboxes, and accepted domains under a single unified billing and subscription profile.

To merge two organizations and their associated subscriptions within MachPanel, you will need to perform a migration sequence that reassigns the domains, subscriptions, and users from the source organization to the destination organization. Because MachPanel treats each customer organization as a distinct security and billing boundary, the system does not have a single "merge" button. Instead, the process must be completed using built-in account management and subscription tools.

Here is the strategic framework and operational plan to execute the merger successfully.

Applies To

This article applies to MachPanel build v8.2.50 and above

Existing Setup:

Customer-A > OrgA > Domains: > DomainA.com
Customer-B > OrgB > Domains: > DomainB.com

Required Target Setup

Existing Customer (Customer-B) > OrgA
- - Domain: DomainA.com and DomainB.com
  - Mailboxes: All users belonging to both DomainA.com and DomainB.com

Pre-Requisites

Database Backup: Always back up the MachPanel_Db database via SQL Server Management Studio (SSMS) before executing structural updates directly in tables.
Security Group Exception: When remapping backend assets, do not move the system-generated Exchange Security Groups (SGs) belonging to the source organization.

Phase 1: Active Directory & Exchange Server Re-alignment (Back-end AD / Exchange)

Perform these operations directly within your Active Directory Domain Services (AD DS) and Exchange Server environment.

Step 1: Relocate Organizational Objects

1. Open Active Directory Users and Computers (ADUC) on your domain controller.
2. Navigate to the Organizational Unit (OU) of the Source Organization.
3. Select and move all Active Directory Users, Custom Distribution Groups / Security Groups, and Contacts into the target OU path of the Destination (Target) Organization.
• Critical Exclusion: Leave the Primary Exchange Server provisioning Security Group (SG-OldOrg) behind in the source OU.

Step 2: Update the UPNSuffices / User Principal Name (UPN) Suffixes:

Check and copy the uPNSuffixes from properties of Source-OU and copy them over to Target-OU.

In this case, copy from "domainb.com" to "domaina.com".

Phase 2: MachPanel Control Panel and Database Updates

Because MachPanel maps domain assets to explicit tenant records via a database mapping structure, backend pointer shifts are required.

Step 3: Add Source-Tenant Domain Name as Domain Alias under the Target-Tenant in MachPanel

1. Access your MachPanel Database Instance using SQL Server Management Studio (SSMS) being logged in as MachPanel_Db user.
2. Open a new query window against the MachPanel database.
3. Locate the HB_tblExchangeOrganizationDomains table entry to alter the binding configuration from the source tenant ID to the target tenant ID.
4. Execute an explicit update statement targeting the domains being merged:

SELECT * FROM HB_tblExchangeOrganizationDomains
WHERE (DomainName LIKE '%domaina%') OR (DomainName LIKE '%domainb%')

UPDATE HB_tblExchangeOrganizationDomains
SET OrganizationId = @TargetOrgId
WHERE OrganizationId = @OldOrgId AND DomainName IN ('domain1.com', 'domain2.com', 'domainx.com');

Note: You also have to mark the other domain 'domainb.com' as Not Primary, because there can be only one domain that should be primary and since the both domains are from different organization/subscriptions so both will be set as Primary in MachPanel database, so you have to make other domain as Not Primary using below query.

Update HB_tblExchangeOrganizationDomains Set IsDefaultDomain='0' where DomainName = 'domainb.com'

Verify that the record handles align correctly to avoid impacting independent multi-tenant profiles.

Phase 3: Directory Clean-Up & Panel Re-calibration Flow

Step 4: Update Database Records using Sync from Backend Operation:

1. Log into the MachPanel Provider Control Center (PCC).
2. Navigate to Service Director > Exchange Hosting > Organizations.
3. Select the New (Target) Organization profile.
4. Trigger a Sync from Backend action.
5. Because the users, groups, and contacts were migrated out of the Source-OU to the Target-OU in Step 1, this sync operation safely adds the new objects (Mailboxes, Active Directory users, etc.) to the panel under target tenant.

OrgA
- Perform Sync from backend for OrgA, check DomainB.com users (Mailbox and AD Users) get removed form OrgA.

Step 5: Clear the Source Subscription

1. Access your MachPanel Database Instance using SQL Server Management Studio (SSMS) being logged in as MachPanel_Db user.
2. Open a new query window against the MachPanel database.
3. Locate the HB_tblExchangeHosting table entry to clear subscription from panel.
4. Execute an explicit update statement targeting the domains being merged:

SELECT *
FROM HB_tblExchangeHosting
WHERE (ExchHostingID = @SourceExchangeHostingID)

After ensuring the resulting record is correct, execute below (be careful when executing this):

Delete
FROM HB_tblExchangeHosting
WHERE (ExchHostingID = @SourceExchangeHostingID)

This will result in having only one Hosting Record in panel for the target Organization/Domain only.

Added VM Scheduled Management Operation (Turn On/Off)

mudesira.munir — Tue, 15 Sep 2026 06:15:09 GMT

Summary

This article provides information on how to manage schedulling of VM's in Automation Module for Microsoft Hyper-V.

Applies To

Applies to MachPanel v8.2 and onward.

Added VM Scheduled Management:

Navigate to path: Home > Service Director > Virtual Machine Hosting > Virtual Machines
Select Schedules tab as shown below:

To manage Schedule under a VPS account, click Manage

Select Schedules tab and click Add

Major Components for MachPanel Build 8.0.32 and Higher

zohaib.shaikh — Tue, 08 Sep 2026 11:32:43 GMT

Summary

This article outlines steps to install/configure two major component for build 8.0.32 and/or higher.

1 - Installing Microsoft .Net Framework 4.8 (Required for build 8.0.32 and higher)

If you are already running MachPanel Build 8.0.32 or higher, then this prerequisite is already there. If you are updating from an older build, then you will need to download Microsoft .Net Framework 4.8 on control and remote servers. Once downloaded you must run the installer to install .Net framework 4.8 following below steps:

After the installation of .Net Framework 4.8 your server will require a restart. You can click on 'Restart Now' button.

Also, it is recommended to use the latest version of browsers (Chrome, Firefox and Edge) and MachPanel HelpDesk Service should be disabled before starting the Auto Update Process.

2 - Important Note for MachPanel Load Balanced Setup (Build 8.0.32 and higher)

If you are already running MachPanel Build 8.0.32, then this prerequisite is already there. If you are updating from an older build and you are using MachPanel Load Balanced setup then you must follow below steps after the update:

Locate MachPanel_AppPool in IIS, open Advanced Settings and select .NET CLR version v4.0, restart the App Pool and Web App / Web Site.

Copy Web.Config file from Primary Control Server (C:\Program Files\MachSol\MachPanel Control Server) to all your Secondary Servers.
Also, make sure all others files are updated on Secondary Servers, if not then you have you update all files from Primary Control Server to all Secondary Server by stopping all MachPanel services including MachPanel Configuration Studio on all Server and stopping MachPanel App Pool and MachPanel Website.

MachPanel Build v8.3.25 Release Notes (Sept 08, 2026)

mudesira.munir — Sat, 05 Sep 2026 18:57:35 GMT

Content

Important Prerequisites/Upgrade Instructions
Important Notes
Improvements/New Features
Resolved/Fix Issues

1. Important Prerequisites

Customers using old module like Exchange 2010, Exchange 2010 Hosted, should NOT update to MachPanel v8.
If you are already running MachPanel Build 8.0.32, then this prerequisite is already there. If you are updating from a build older than 8.0.32, then you will need to download and install Microsoft .Net Framework 4.8 as explained HERE:
When ready, you need to follow the steps given below in sequence and execute instructions in the KB articles to complete the update:

2. Important Notes

If you are using MachPanel Rest API, please follow link below to update to latest version of Rest API (If it is installed under default location "C:/Program Files/MachSol/RESTAPI", it will be updated automatically during auto update process):

Update to Latest MachPanel REST API

If you are running MachPanel 8.0.32 with Load Balanced setup, this prerequisite is already there. If you are updating from an older build, then you must follow steps HERE after the update:

3. Improvements/New Feature

General (MachPanel, AD, Configuration Studio, REST API, HelpDesk):

Improved Audit Logging for Exchange and Hyper-V modules
Added permissions for Staff and Customer/Reseller access to manage different sections in Active Directory, Hyper-V, and Exchange.
Added feature to schedule emails for the Over Quota Usage Report.
Added function for the Over Quota Usage Report in the REST API.
Added REST API method to change the Mailbox type.
Added REST API methods to manage Mailbox Calendar permissions.
Added GET/SET Advanced Settings endpoints to the REST API
Added REST API endpoint to authenticate via the AD Account setting
Added support to release locked threads from a crashed machine in a load-balanced deployment.
Updated KeyCloak Authentication to work with the Panel Username (email).
Added support to resize the background image (Login Background Image).
Updated the banner display on the Login and Forgot Password pages.
Added Customer Contacts Access Template Management.
Added an option to include Employee ID as an optional field in CSV files.
Added an option to download logs for Jobs in Group Action Logs.
Added an option to download Thread Logs.
Added an option to edit the Domain Name in an AD Organization
Added an option to enable the Exchange service and Group Membership for AD Sync users.
Added an option to skip Enable/Disable jobs when updating Bulk AD Users.
Added an option to export AD Users to CSV from Update Bulk AD User.
Added an Email field to Security Groups.
Added new report-related permissions to Staff Roles and Access Permissions.

Microsoft Exchange:

Enhanced Exchange DL Membership listing by using Selectable/Select only, removing the Members Listing, and optimizing performance to handle 10,000+ records faster.
Optimized and enhanced Exchange Distribution Group Members management.
Optimized Exchange and AD Management to avoid deadlocks and improve loading and processing times.
Added a Mailbox Add-on Report REST API
Updated Resources Mailbox handling; when the Manager is changed, Full Access permissions are automatically updated.
Added a REST API method to update the Customer Linked AD User.
Updated the REST API Mailbox Features method.
Added PATCH operations for Mailbox General Settings and Advanced Settings through the REST API
Added a Custom Quota setting for Mailbox Personal Archiving.
Updated mailbox export to include the LegacyExchangeDN.
Added option to "Sync from backend" for User Mailboxes changed to O365/Remote Mailboxes during Exchange Organization Migration.
Added handling to automatically add the primary email address of mailbox when the AD User UPN is changed.
Updated Send Connector Management.
Updated Resource/Room Mailbox Full Access Manager auto-update.
Updated the Mailbox Listing to better display mailboxes with different UPNs and Primary Email addresses.

Microsoft Hyper-V(VPS):

Updated VM Disk Management, optimized its speed, and added an option to skip disk format commands. To disable disk formatting and reboot handling, run the script: Update HB_tblSystemSettings Set AutoConfigureDisk = 0.
Updated NIC Management for Dynamic Pool and SDN cases; no reboot is required for Windows VMs.
Updated logging in VM creation. The Run button is disabled for Customers. Implemented SDN Licensing Management in MachPanel.
Added Snapshot support for Hyper-V Cluster deployments.
Added a feature to map Servers to Customers in Hyper-V. It also updates the Owner nodes in the Cluster setup on the backend.
Excluded VM package resources from the Recycle Bin.
Improved VPS Subscription resource display.
Improved VM Management UI/UX.
Added a feature to manage Trunk Port configuration in NIC Management for Providers.
Added Provider selection to the Subnet Pool Add/Edit interface in the Reseller Selectable/Select option.
Added a VPS Subscription (Package/Addon) Report.
Added Group Actions in the VPS module.
Added Hyper-V VM Pause/Resume state handling and aligned the Suspend action with the Save operation.
Added the VM Reinstall operation.
Updated VPS Subscription resource calculation to exclude resources assigned to VMs in the Recycle Bin.
Added more filters and statistics, including Refresh State data, to VM listings.
Added Dynamic IP allocation handling for Linux VMs.
Added VLAN listing for assigning Dynamic Pools to Customer Subscriptions.
Added handling to import VMs without automatically reading the IP when a Dynamic Pool is used.
Hidden "Select Reseller" option when resellers are not used in Subnet Pools.
Added an option to install the OS using an ISO during VM creation.
Import and Management also include an option to change the Sealed Image/ISO setting for Providers.
Added an option to change the OS type of an existing VM.
Updated VM Import so that NIC settings are handled automatically. If no matching settings are found, a message appears instructing the user to configure the settings manually.
Added Cluster support in VPS Import; all VMs on the cluster are now listed for import.
Updated VM Import to handle Cluster resource names containing SCVMM VMName resources.
Added default settings in VPS Import to make it easier to pre-select settings and import multiple VMs for a customer in one go.
Added a Customization section under the VPS module Setup section.
Enhanced VM Location configuration in VPS Server Groups.
Added support for selling Addons for a VPS Single VM.
Added a Separate VLANs Report.
Updated Audit Logging in the Hyper-V module.
Updated IP handling and UI in the Hyper-V module.
Updated the VM reboot message.
Updated VPS Import to display an error when duplicate NIC names are detected.
Added logging to help identify the cause of incorrect disk consumption values in Disk Management.
Updated VLAN handling in the Hyper-V module.
Added a feature to reset Firewall rules to their default settings for an interface.
Added hyperlinks for easier navigation where needed in the VPS module.
Added an "Apply changes inside VM" checkbox to Add/Expand Disk for Windows VMs. If checked, a reboot is required; otherwise, no reboot is needed.

Microsoft CSP:

O365 Subscription "Auto Renewal" settings should be synced with backend
Access Template/permission to Manage O365 Subscription allowed.

Microsoft Skype for Business:

Improved Audit Logging in SFB Module

4. Resolved / Fixed Issues

General (MachPanel, AD, Config Studio, REST API, HelpDesk):

REST API search using domain alias fixed.
Fixed Country not get set while creating AD User through ADSync.
Fixed Password Combination issue for Mailbox User
Fixed AD Organization Domain Edit issue not getting updated on backend AD.
Fixed Automatically Add Users in Security Group of AD Organization.
Fixed / Handled / Addressed Security Vulnerabilities below:
- SQL Injection vulnerabilities
- Stored Cross-Site Scripting (XSS) Vulnerabilities
- Insecure Direct Object Reference (IDOR) / Sensitive Information Disclosure
- SSO Bypass via Alternative Login Page
- Improved Input Validation and Output Encoding
- Improved Authentication and Authorization Controls
- Improved Error Handling and Secure Data Handling
- Addressed Bootstrap-select 1.10.0 due to CVE-2019-20921
- Addressed reported Bootstrap 3.4.1 vulnerabilities (CVE-2024-6485, CVE-2025-1647)
- Addressed Chart.js 2.2.1 due to CVE-2020-7746
- Addressed Vue.js 2.6.11 due to CVE-2024-9506
- Updated third-party components to eliminate known reported vulnerabilities

Microsoft Exchange:

Fixed the issue where a mailbox created for a synced AD User did not appear in the listing when the Country was null in the Customer AD by setting the Country to the Customer Profile Country.
Fixed the mailbox connect/recreate issue through the MachPanel Recovery interface.
Fixed the Exchange DL LDAP issue after setting the Email Alias as the Primary Email.
Fixed remote users being displayed as already existing on-premises users.
Fixed the Shared Mailbox permission violation issue.
Corrected Mailbox Usage information in the REST API.
Fixed the Export Forwarding Report error on the Customer side.
Hidden Exchange Recycle Bin and Recovery options when the Exchange module is disabled.
Fixed Custom Quota values not being displayed in the Mailbox Advanced tab.
Fixed the issue where Public Folder Mailboxes were not automatically removed from Exchange after the associated subscription was cancelled.
Fixed the Bulk AD User creation issue when the Country was not specified in the CSV file.
Fixed the issue where AD User fields were missing when creating an AD User with an Exchange mailbox enabled from the AD User interface.
Fixed missing user attributes when creating a mailbox from the Exchange interface.
Fixed the issue where Get Mobile Device using Identity failed when the LDAP of the mailbox was changed.
Fixed the error when adding a mailbox by selecting an existing AD User.

Microsoft Hyper-V(VPS):

Fixed the issue where Get Mobile Device using Identity failed when the LDAP of the mailbox was changed.
Fixed the error when adding a mailbox by selecting an existing AD User
Fixed the VPS addon throwing an exception due to a missing NATted IP record.
Fixed the VPS IP-only addon not getting provisioned.
Fixed VPS disk options in Add VPS.
Fixed the VPS Disk Move operation.
Fixed the Expand Disk operation showing the wrong disk type.
Fixed NIC addition in Linux VMs for pfSense integration.
Found the cause of the 504 error in VM operations: HTTP/HTTPS gateway connection timeout. The timeout needs to be increased to 1800 seconds.
Fixed the wrong ServerId being set for imported VMs in a cluster setup.
Fixed the error "The INSERT statement conflicted with the FOREIGN KEY constraint "FK_HB_tblVPSAccounts_HB_tblVPSHosting"... occurring during VM import.
Fixed VM Management freezing when the Memory tab is opened.
Corrected the VM account name link.
Fixed an error in the Hyper-V VM stats synchronization routine.
Fixed the error when adding a NIC with an apostrophe in the NIC name.
Fixed the error when removing a VPS subscription.
Fixed the issue with incorrect time processing for VM schedules.

Web Console Integration for Hyper-V in MachPanel

zohaib.shaikh — Tue, 01 Sep 2026 07:07:26 GMT

Summary

This article provides information about integration of Myrtille web console for Hyper-V in MachPanel.

Applies to

Applies to MachPanel build v 7 and above

Details

MachPanel utilizes and supports Myrtille as the web-based console for Virtual Machines (VMs). Myrtille enables users to access their Windows VMs directly through a standard web browser using RDP over VM Bus (Hyper-V) allowing access without network configuration on the guest OS.

MachPanel integrates with Myrtille to provide browser-based VM console access, making it easier for users to connect to and manage their VMs remotely. The Myrtille component handles the connection, while MachPanel manages the VM and user access within the platform.

Key Feature:

Network Independence Access.
No RDP or SSH required on Guest.
Cross-Platform compatibility for Guest OS.
Hyper-V Enhanced Mode Support.

Pre-Requisites

Ensure that “Allow enhanced session mode” is enabled on each Hyper-V Server under “Hyper-V Server Settings”.

Make Sure default site under IIS is running on MachPanel Server on port 8080, before starting installation

Download and Install

Download the supported version of Myrtille
Start the installation and proceed the installation with default settings (Just click Next of all interfaces) and complete the installation

Verification of Myrtille

First, make sure the Myrtille connection is working directly by supplying information of your Server and VM using RDP over VM Bus (Hyper-V) method.
Make sure TCP Port 2179 is open between the Myrtille Server and your Hyper-V server.

Integration in MachPanel

Replace DLL: After you have verified that Console Access is working for your VM using Myrtille, please download the DLL file on the server where Myrtille is installed.
- Unblock the Zip file (if blocked) by going to file properties
- Extract the DLL from within
- Replace this in bin folder under Myrtille Installation i.e C:\Program Files (x86)\Myrtille\bin
- After doing so, the Myrtille page will not work anymore and it will only work via the Web Console button in MachPanel VM Management.
Create a Service Account: Create a user with Administrative Privileges for MachPanel Web Console on your Hyper-V Servers. If you have Cluster Setup of Hyper-V you can create a Domain User.
- Add user details in web.config at (C:\Program Files (x86)\Myrtille) under <appSettings> and change username/password/domain as per your settings
  <add key="AdminUser" value="Administrator" />
  <add key="AdminPass" value="P@ssw0rd#@!123" />
  <add key="AdminDomain" value="LabDomain2019" /> //this line can be skipped if you have standalone hyper-v servers

Add URL in MachPanel: Add below URL in MachPanel Web Console Configuration for each server:
- http://'IP/URL of Myrtill here':8080/Myrtille/Default.aspx/?__EVENTTARGET=&__EVENTARGUMENT=&connect=Connect%21&server=
- Replace 'IP/URL of Myrtille Web Console here' in above URL with IP according to your Server IP or URL.
- Navigate to Service Director > Virtual Machine Hosting > Server Group and click the Server Group Name, then Edit your Hyper-V Hosts one by one and for each Hyper-V Host/Server, add the updated URL in the field called "Web Console Access URL:" then update/save configuration.

Once its done you will be able to see 'Web Console' button under the Virtual Machine Management interface hosted on the respective Hyper-V host.

When you pass over this button, you will get two options. Click your desired option to connect to the VM:

It will open a new tab for web console to this VM.

SOP for preparation of Sealed images with MS_SQL_Server_2022

mudesira.munir — Wed, 17 Jun 2026 08:49:50 GMT

Summary

This article provides information about preparation of sealed images for Windows Virtual Machines with MS SQL Server 2022.

Applies To

Applies to MachPanel v8 and onward.

Procedure for creating Windows VM Sealed Images with MS SQL Server 2022

STEP-1: CREATE VM

Minimum Disk Space 10-12 GB: Create a VM to host the operating system of your choice with minimal disk space i.e. from 10 to 12 GB, as the purchased storage will then be added to respective VM later based on Service Plans.

Required Partition Settings:

Proper disk partitioning is critical for successful deployment. The recommended partition order is:

EFI System Partition (ESP) - SYSTEM
Recovery Partition (WinRE) - MSR (Reserved)
Windows (C:) - Primary

Hint : Create the Windows (C:) partition first (by selecting "New" in the Windows Setup dialog), Windows Setup automatically creates the required UEFI/GPT partitions in the correct order behind the scenes.

STEP-2 SCHEDULED TASK

In order to set Machine Name, Password and IP Address of VM, a "Scheduled Task" in sealed image must be created. Please review details below to create a scheduled task to allow MachPanel to "Set Password" and process other OS initialization steps in Gen1 & Gen2 VM: Creating Scheduled Task

Note: There is a difference between creation of scheduled task for Gen1 and Gen2 type virtual Machines. Please check details in above KB and create task accordingly.

STEP-3 Installing Microsoft SQL Server 2022 as Built-in part of Windows Sealed Image

Perform these steps on your reference Windows Server 2022 machine before running Windows SysPrep

Mount or attach the SQL Server 2022 Standard installation media to VM.
Launch setup.exe to open the SQL Server Installation Center
In the left navigation menu, click Advanced
Select Image preparation of a standalone instance of SQL Server

Accept License terms
Select the desired Features
Give Instance ID , (e.g. MSSQLSERVER, SQL2022STD)

Complete rest of steps, click prepare

STEP-4: SEAL THE IMAGES / PREPARE WINDOWS VM SEALED IMAGES

Download the sample / generic sysprep.xml file provided in download section in this article (adjust it if required per your requirements).
Copy sysprep.xml to C:\Windows\System32\sysprep inside the VM that needs to become your sealed image / OS template.
Open Command Prompt as Administrator
Navigate to SysPrep Directory: CD C:\Windows\System32\sysprep>
Run command: sysprep.exe /generalize /oobe /shutdown /unattend:sysprep.xml
On completion, you will find the VM in shutdown state.
Your sealed image is ready. You can copy this <name>.VHD / <name>.VHDX file to MachPanel's Sealed Image repository directory and specify the path to the prepared file in MachPanel configuration.

STEP-5: After VM Provisioned

On Each VM deployment

Use the “Image completion of a prepared stand-alone instance” from start menu

During SQL Complete Image, provide:
- Product key (for Standard edition)
- Instance name (can differ from Instance ID)
- Service accounts (e.g., NT Service\MSSQLSERVER or domain accounts)
- SQL Server administrators (Add current user)